Enable signing on mac & linux

Author: ellahathaway

.azure/pipelines/ci-public.yml

@@ -54,6 +54,8 @@ variables:
   value: '/p:SkipTestBuild=true /p:PostBuildSign=$(PostBuildSign)'
 - name: _PublishArgs
   value: ''
+- name: _SignArgs
+  value: ''
 # Write binary logs for all main Windows build steps except the x86 one in public and PR builds.
 - name: WindowsArm64LogArgs
   value: /bl:artifacts/log/Release/Build.arm64.binlog
@@ -242,13 +244,15 @@ stages:
       buildArgs:
         --arch arm64
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-MacOS_arm64.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       artifacts:
       - name: MacOS_arm64_Logs_Attempt_$(System.JobAttempt)
@@ -258,11 +262,6 @@ stages:
       - name: MacOS_arm64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: MacOS_arm64
-
   # Build MacOS x64
   - template: jobs/default-build.yml
     parameters:
@@ -272,13 +271,15 @@ stages:
       timeoutInMinutes: 90
       buildArgs:
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-MacOS_x64.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       artifacts:
       - name: MacOS_x64_Logs_Attempt_$(System.JobAttempt)
@@ -288,11 +289,6 @@ stages:
       - name: MacOS_x64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: MacOS_x64
-
   # Build Linux x64
   - template: jobs/default-build.yml
     parameters:
@@ -305,11 +301,13 @@ stages:
             --ci
             --arch x64
             --pack
+            --sign
             --build-installers
             --all
             --no-build-java
             -p:OnlyPackPlatformSpecificPackages=true
             $(_BuildArgs)
+            $(_SignArgs)
             $(_InternalRuntimeDownloadArgs)
         displayName: Run build.sh
       artifacts:
@@ -320,11 +318,6 @@ stages:
       - name: Linux_x64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_x64
-
   # Build Linux ARM
   - template: jobs/default-build.yml
     parameters:
@@ -334,13 +327,15 @@ stages:
       buildArgs:
         --arch arm
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-Linux_arm.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       artifacts:
       - name: Linux_arm_Logs_Attempt_$(System.JobAttempt)
@@ -350,11 +345,6 @@ stages:
       - name: Linux_arm_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_arm
-
   # Build Linux ARM64
   - template: jobs/default-build.yml
     parameters:
@@ -366,11 +356,13 @@ stages:
             --ci
             --arch arm64
             --pack
+            --sign
             --build-installers
             --all
             --no-build-java
             -p:OnlyPackPlatformSpecificPackages=true
             $(_BuildArgs)
+            $(_SignArgs)
             $(_InternalRuntimeDownloadArgs)
         displayName: Run build.sh
       artifacts:
@@ -381,11 +373,6 @@ stages:
       - name: Linux_arm64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_arm64
-
   # Build Linux Musl x64
   - template: jobs/default-build.yml
     parameters:
@@ -397,13 +384,15 @@ stages:
         --arch x64
         --os-name linux-musl
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-Linux_musl_x64.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       disableComponentGovernance: true
       artifacts:
@@ -414,11 +403,6 @@ stages:
       - name: Linux_musl_x64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_musl_x64
-
   # Build Linux Musl ARM
   - template: jobs/default-build.yml
     parameters:
@@ -431,13 +415,15 @@ stages:
         --arch arm
         --os-name linux-musl
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-Linux_musl_arm.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       artifacts:
       - name: Linux_musl_arm_Logs_Attempt_$(System.JobAttempt)
@@ -447,11 +433,6 @@ stages:
       - name: Linux_musl_arm_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_musl_arm
-
   # Build Linux Musl ARM64
   - template: jobs/default-build.yml
     parameters:
@@ -464,13 +445,15 @@ stages:
         --arch arm64
         --os-name linux-musl
         --pack
+        --sign
         --all
         --no-build-java
         --publish
         -p:OnlyPackPlatformSpecificPackages=true
         -p:AssetManifestFileName=aspnetcore-Linux_musl_arm64.xml
         $(_BuildArgs)
         $(_PublishArgs)
+        $(_SignArgs)
         $(_InternalRuntimeDownloadArgs)
       artifacts:
       - name: Linux_musl_arm64_Logs_Attempt_$(System.JobAttempt)
@@ -480,11 +463,6 @@ stages:
       - name: Linux_musl_arm64_Packages
         path: artifacts/packages/
 
-  - ${{ if ne(variables.PostBuildSign, 'true') }}:
-    - template: jobs/codesign-xplat.yml
-      parameters:
-        inputName: Linux_musl_arm64
-
   - ${{ if ne(parameters.skipTests, 'true') }}:
     # Test jobs
     - template: jobs/default-build.yml